Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: pn4z4d6Cf+hpg1o7+RmzNxqdAbybLICscr/K7id39pg=
Subject key identifier: D6:36:5E:4B:9F:5D:43:23:65:94:89:D2:FE:0D:FB:BB:C7:D7:A6:44
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 0199FF59B66ADE8B03333FEA469587D25ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0632
Signing time: Mon 20 Oct 2025 02:01:33 +0000
Manifest this update: Mon 20 Oct 2025 02:01:33 +0000
Manifest next update: Tue 21 Oct 2025 02:01:33 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: V0h0ZGegS8iJTbp/FQ+DGOmmC9iXM32EShxK/NyKdh8=)
2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b6:6a:de:8b:03:33:3f:ea:46:95:87:d2:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Oct 20 02:01:33 2025 GMT
Not After : Oct 21 02:01:33 2025 GMT
Subject: CN=d6365e4b9f5d4323659489d2fe0dfbbbc7d7a644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:07:87:a1:bf:f5:eb:64:c0:8b:55:e6:7d:
13:ab:90:99:40:b9:1a:24:15:79:c2:82:c0:3a:b8:
88:dd:d3:c3:53:e7:8a:34:54:90:0b:a8:5a:f7:18:
aa:b4:b7:b9:be:8e:8c:20:cb:48:5f:6b:ee:f4:99:
d6:f2:4f:ff:36:c0:54:7b:5c:76:7c:0c:df:6d:ad:
83:4b:bc:ac:93:35:4f:74:2c:a2:c3:fa:3b:5b:96:
4b:3f:81:9e:70:68:29:0e:1f:c9:b8:6d:59:1b:d0:
d8:d0:bb:a8:8e:8c:44:55:8f:44:70:f1:b2:2c:9e:
79:fc:9e:48:96:06:ce:5f:0e:28:65:ea:b5:e7:c0:
5d:94:f8:f3:0a:56:1d:1a:bc:c3:b2:73:11:2d:80:
5a:f7:44:9a:ca:20:39:43:63:7a:f3:2d:d6:7c:ae:
d0:67:21:fb:cd:4b:cc:11:a1:11:65:3b:76:aa:59:
19:a4:e4:98:f2:60:55:01:c8:ef:e5:1a:a1:ab:08:
ae:74:d1:78:88:c2:55:9c:24:81:39:f0:90:f8:62:
36:2a:79:fd:24:13:77:1c:3e:a0:03:dc:09:4c:db:
03:55:79:81:5c:dd:1a:48:0a:05:59:d2:97:23:1f:
d7:8b:f2:8c:7e:45:53:b3:94:5d:4b:c2:a1:f2:63:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:36:5E:4B:9F:5D:43:23:65:94:89:D2:FE:0D:FB:BB:C7:D7:A6:44
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:05:a1:97:7d:0d:83:ae:a5:3a:1d:da:9f:6a:84:15:b1:bd:
19:ae:8f:5e:5a:8f:ee:fb:29:ee:05:89:12:5a:23:49:59:90:
39:1e:fd:8b:4c:d1:b3:6f:c4:b6:43:8b:f7:1e:a6:e1:bb:d3:
31:7f:f9:15:9e:84:8b:64:5a:f6:26:bc:e6:99:14:69:a6:3c:
7a:ce:56:3f:ed:56:d9:d7:51:da:11:93:db:e9:24:b8:e8:03:
ea:88:b6:0d:14:84:da:4d:70:5a:e4:3b:f5:06:b6:f7:72:73:
74:35:ca:80:a2:d2:d8:2c:61:8c:61:0e:40:ea:4f:77:89:30:
6f:11:6c:a7:24:f5:45:39:57:51:a8:6a:0f:4c:d3:c5:d8:13:
ac:06:96:49:08:15:b4:e7:e6:7a:dd:85:3d:4a:73:22:36:f9:
b9:ac:59:bf:20:ff:ed:3e:67:72:e5:f6:1f:8d:c1:c7:6b:37:
5d:ca:10:0e:e5:56:15:0e:da:13:04:d0:7f:49:51:39:7f:6a:
dd:61:03:1d:ed:a3:bf:ed:d6:c0:b4:b3:65:3f:4e:76:3b:09:
78:9f:3c:3c:10:fa:63:6a:54:b6:9d:a8:c6:54:1a:43:82:7b:
6d:b6:2f:84:d1:72:f9:4a:0d:cd:6b:c8:9c:5d:9a:82:72:0d:
b2:56:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:59:56 2025 by rpki-client